• info
• discussion
• exploit
• solution
• references

EQDKP Login.PHP Arbitrary Variable Overwrite Vulnerability

EQdkp is prone to a vulnerability that permits an attacker to overwrite arbitrary variables because of a design error.

Successful exploits will result in the compromise of vulnerable applications or denial-of-service conditions; other attacks are possible.


EQdkp 1.3.2e and prior versions are vulnerable.